Lynx Project

Lynx

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2021-38165

  • EPSS 4.28%
  • Published 07.08.2021 18:15:06
  • Last modified 21.11.2024 06:16:32

Lynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers to discover cleartext credentials because they may appear in SNI data.

7.8

CVE-2014-5002

Exploit
  • EPSS 0.08%
  • Published 10.01.2018 18:29:00
  • Last modified 21.11.2024 02:11:15

The lynx gem before 1.0.0 for Ruby places the configured password on command lines, which allows local users to obtain sensitive information by listing processes.

5.3

CVE-2017-1000211

  • EPSS 0.43%
  • Published 17.11.2017 15:29:00
  • Last modified 20.04.2025 01:37:25

Lynx before 2.8.9dev.16 is vulnerable to a use after free in the HTML parser resulting in memory disclosure, because HTML_put_string() can append a chunk onto itself.

7.8

CVE-1999-1549

Exploit
  • EPSS 0.21%
  • Published 16.11.1999 05:00:00
  • Last modified 03.04.2025 01:03:51

Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a "secure" hidden form value from a temporary file and craft a LYNXOPTIONS: URL that causes Lynx to modify the user's configuration fi...